切換到寬版
  • 3022閱讀
  • 2回復

[轉載]給3000的人一個希望 [複製鏈接]

上一主題 下一主題
離線beenoyau100
 

發帖
1563
icash
215
威望
1188
只看樓主 倒序閱讀 使用道具 樓主   發表於: 2009-04-19
基於TIFF漏洞的Hello World第二版,PSP-3000破解希望?

第二版的更新,讓PSP-2000也可以體驗,有網友證實,PSP-3000也可以使用
提醒下,並非一次成功,試了20次死機21次絕對不意外

TIFF不管到哪都有漏洞,相當和諧
此Hello World基於5.03系統,有條件的可以試試看

下載  Hello World TIFF v2 for Firmware 5.03:
BDG載點:Hello_World_TIFF_v2_for_Firmware_503.rar  163.87 KB
MF載點:Hello_World_TIFF_v2_for_Firmware_503.rar  163.87 KB

使用方法:
0.此Hello World基於5.03系統,可以執行在所有PSP上,包含PSP-3000
1.下載後解壓,如果是PSP-1000,請把phat.tiff放到記憶卡PSP/PHOTO資料夾下
PSP-2000/PSP-3000請放入slim.tiff,禁止同時放入這兩個tiff圖片檔
2.h.bin檔案放到記憶卡根目錄下
3.點選PSP上的相片-->MemoryStick
要注意的是,如果成功的話,會在你圖片預覽圖時出現效果,如果沒有,就表示失敗了
並非直接打開圖片瀏覽,因為這一定會死機

實際操作影片:http://www.youtube.com/watch?v=h2yj3bPAMGY

以下是Hello World的簡介:
The days of TIFF based exploits aren't long gone, at least not yet
Here's the third TIFF exploit for the PSP, enjoy.

Just copy the files to the memory stick root, disconnect USB and go to photo menu.
Don't dismiss the exploit even if it doesn't work on the first time, it's *very* unstable.
You might get it working on the first time, but you might as well have to try it 20 times!

The h.bin is loaded to 0x08800000, and the text address of paf.prx is passed in $a0 to the
binary code. You can then trick out function imports,
like for example sceDisplayWaitVblankStart:

sceDisplayWaitVblankStart = (void*)(paf_addr+0x15F068);

This release works _only_ on fat PSPs. The slim version will come out later.

I'm not gonna include a list of credits here, I'll just forget some important names and then
I'll be screwed :P The people who need to be credited will know it anyway.

Have fun!

P.S. Just wait a few days, there's a bit of awesomeness coming up.

- MaTiAz
離線@@俠俠@@

發帖
10404
icash
6391
威望
8044
只看該作者 1樓  發表於: 2009-04-19
剛剛先買2000機.....
個天唔係咁對我下化....
離線beenoyau100

發帖
1563
icash
215
威望
1188
只看該作者 2樓  發表於: 2009-04-20
引用第1樓@@俠俠@@於2009-04-19 21:52發表的  :
剛剛先買2000機.....
個天唔係咁對我下化....

要破3000都要d時間,而破唔破到都有問題,希望破解大大們可以快d
p.s.你2000幾錢 $.$
快速回復
限100 字節
 
上一個 下一個